On this page
Atomicorp WAF Rule 380106
Rule Summary
- Rule ID: 380106
- Status: Active
- Alert message: Atomicorp.com WAF Rules - Virtual Just In Time Patch: Phorum username Script Insertion Vulnerability
- Observed CWEs: CWE-79 (4), CWE-94 (4)
- Revision: 1
- Rule severity: Critical (2)
- Request surfaces: Request URI
- Rule action: deny
- Logging: log, auditlog
Description
This rule detects behavior identified by its current alert as “Virtual Just In Time Patch: Phorum username Script Insertion Vulnerability” in the request URI. denies matching traffic.
Selected Related CVEs
This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.
| CVE | Vulnerability | Product | CVSS | Severity |
|---|---|---|---|---|
| CVE-2025-12244 | code-projects Simple E-Banking System register.php cross site scripting | simple e-banking system | 2.1 (v4.0) | Low |
| CVE-2025-13244 | code-projects Student Information System register.php cross site scripting | student information system | 2.1 (v4.0) | Low |
| CVE-2026-11518 | SourceCodester Inventory System User Management users.php cross site scripting | Inventory System | 2.1 (v4.0) | Low |
| CVE-2026-13499 | yashpokharna2555 restaurent-management-system Registration login_register.php cross site scripting | restaurent-management-system | 2.1 (v4.0) | Low |
Observed CWEs
These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.
| CWE | Related Published CVEs |
|---|---|
| CWE-79 | CVE-2025-12244 , CVE-2025-13244 , CVE-2026-11518 , CVE-2026-13499 |
| CWE-94 | CVE-2025-12244 , CVE-2025-13244 , CVE-2026-11518 , CVE-2026-13499 |